There is something really tragic here.

EU has PSD2 which enforce good, strong rules on customer authentication. For example, banks must have two-factor authentication. And if both factors live on the same phone, the bank has to safeguard against that phone being compromised. Hence the root detection and app-integrity checks that he is complaining about.

But what's tragic is that instead of understanding the problem, which is partly driven by regulation and mostly not even a problem, he calls for more government regulation. What a mess.